• 9 Posts
  • 2.23K Comments
Joined 2 years ago
cake
Cake day: April 30th, 2024

help-circle
  • 5 years the last one.

    The hardware, including battery, worked great. But it has been lacking updates for some years and I’m worried about vulnerabilities. LineageOS was also not available for this phone.

    I bought a phone with 7 years updates and my initial intention is keeping it for 7 years. More if an stable and secure version of LineageOS is available down the line.



  • What I meant for “multilingual internet” is what companies like Reddit or Google are doing. Forcing automatic translates to the user language automatically.

    For Reddit this means that, as people write there in whatever language instead of the language of the subreddit, when you use the site outside of the official frontend you see a mix of languages. This means that you search for things in one language and get results written in another language, and you might have been looking for something in a specific language, but as automatic translated websites take over they take away your ability to choose in what language do you want to search things. On youtube for instance I cannot longer know in what language the video is going to be spoken. I might look for videos in one language and get mislead by the automatically translated title, and click into the video and get a shitty AI voiceover instead of the original voice of the video.

    For instance I used to search things in Spanish to get “local” websites. Now I search in spanish and I see a bunch of Reddit post about the USA, because reddit forces the translated results into googles feed, and google accepts it. Searching something in a specific language is becoming harder and harder because more and more websites are going multilingual, taking in and serving out any and all languages and doing a bunch of automatic translations in the middle.

    Maybe your perception is different. But for me this forced multilingual internet (and what I mean to this is that the frontends automatically translate the content in the business layer) makes for a poor experience with far less freedom and power over the content I choose to see, compared to what I had before.

    And also the appreciation, that this might lead to more people not seeing the need of learning a second international language. Which, for me, is one of the most important skills in life, as it gives you the ability to communicate with so many people without being dependant on intermediates.



  • Nicht Deutsch, sondern Englisch (oder nicht einmal Englisch, sondern nur die Sprache, in der die Website geschrieben ist, ohne viele Sprachen zu mischen). Zudem spielt die ethnische Herkunft der Menschen für die gesprochene Sprache kaum eine Rolle. Die meisten Englischsprechenden stammen nicht aus dem Land, in dem das Englische ursprünglich entstanden ist. Würde jeder von uns seine eigene Sprache verwenden (meine ist übrigens gar nicht Englisch), müssten Foren ständig Echtzeitübersetzungen einsetzen. Das würde all die zuvor genannten Probleme verursachen und uns für die Kommunikation von solchen Übersetzungstools abhängig machen. Ich weiß, es gibt Leute, die nicht wollen, dass Menschen über einen kleinen, leicht kontrollierbaren Kreis hinaus miteinander kommunizieren können. Aber ich gehöre nicht dazu. Ich betrachte Kommunikation als etwas Positives; deshalb halte ich eine Lingua franca für sinnvoll. Es könnte auch Esperanto sein, aber für mich ist Englisch völlig in Ordnung. Als Gegenbeispiel habe ich diesen Kommentar automatisch ins Deutsche übersetzt, um leichter verständlich zu machen, worum es mir geht.





  • I’m a little paranoid, so this is my security set up.

    SSH, blocked at firewall level, only allowing specific local IP to access port 22. Also authentication is done by key, with password disabled.

    Most services are local only and I access them through wireguard VPN when I’m outside my home.

    For services that need a domain name and be public facing, I use a reverse proxy, with the following protections:

    • Very restrictive geoIP block, only my country can access.
    • Restrictive rate limiting.
    • Crodwsec, with community lists, a pluging for open lists, community rules and my own very restrictive set of rules for banning attackers. (For instance as soon as the requested path contains “.env” that’s an instant ban, no second chances).
    • Monitoring through grafana.
    • Some complex services that need a valid tls handshake but I only want to use them myself have a setup when they are technically open to the net, to get let’s encrypt, but the server rejects every IP request but mine.

    Recently I also reduced some noise, surface attack, deleting the A register from my second level domain and using an obscured target for the CNAME records. I also want to delete the www subdomain as it gets a lot of uneeded noise.



  • I think many people tend to mistake any ddos for an AI scraper.

    People are shitty. And some will just ddos you not for AI but trying to find vulnerabilities or just because they don’t like your site.

    Deeper analysis of the attacks should be given to determine if they were scrapers in the sense that they were trying to get the information from your site, or they were just a ddos trying to take the site down, or maybe they were proving trying to find a vulnerability.

    The latest is the one I get the most. I get petitions for over 400 paths in less than a second trying to find a vulnerable endpoint.

    In these cases they do it so quick, that might provoke a ddos in some servers, because they know that they will get ban as soon as the log get processed, so they need to act quick.